Privacy & Cookie Policy

This website is designed to collect as little information as possible.

• No user accounts or registrations are provided.
• No contact, newsletter or subscription forms are used.
• No advertising or behavioural tracking is used.
• No personal information is sold or shared for advertising.
• No non-essential cookies are intentionally placed on your device.
• No information is intentionally stored using localStorage or sessionStorage.
• Fonts and videos are hosted directly by the website.
• Privacy-focused, cookie-free analytics are provided by Cloudflare.
• Personal information is received only when you voluntarily contact me by email.

Limited technical information may still be processed automatically by the website’s infrastructure and service providers to deliver, secure and measure the performance of the website.

For the purposes of applicable data-protection law, the data controller is:

• Andreas Christofi
• Nicosia, Cyprus
• Email: hello@andreaschristofi.com
• Website: andreaschristofi.com

Questions about this policy or the handling of your personal information can be sent to the email address above.

When you access the website, certain technical information is transmitted automatically between your browser, Cloudflare and the website’s hosting infrastructure.
This information may include:

• Your Internet Protocol address
• Browser and device type
• Operating system
• Requested page or resource
• Date and time of the request
• Referring website, where available
• Approximate country or region
• Network, performance and loading information
• Security-related information
• HTTP response and error information

This technical processing is necessary for delivering the website, maintaining its performance, preventing malicious activity and diagnosing technical problems.
I do not use this information to personally identify individual visitors, create visitor profiles or track people across other websites.

The website uses Cloudflare for hosting, content delivery, network performance, security and protection against malicious traffic.

When you access the website, your request is processed through Cloudflare’s infrastructure. Cloudflare may process technical information such as IP addresses, request information, device information and security signals as part of providing these services.

Cloudflare may also maintain limited technical or security logs in accordance with its own operational, security and legal requirements.

This processing is based on the legitimate interest of operating a secure, reliable and efficient website.

More information about Cloudflare’s handling of information is available through the Cloudflare Privacy Policy:
cloudflare.com/privacypolicy

The website uses Cloudflare Web Analytics to understand general website usage and technical performance.
Cloudflare Web Analytics may provide aggregated information such as:

• Page views and visits
• Popular pages
• Referring websites
• Approximate visitor countries
• Device and browser categories
• Website loading and performance metrics
• HTTP status codes

Cloudflare Web Analytics does not use cookies or browser storage for analytics, does not create persistent visitor identifiers and is not used to track visitors across different websites.

The source IP address may be received by Cloudflare as part of normal internet communication. Cloudflare states that its Real User Monitoring service discards this address at the nearest Cloudflare data centre rather than retaining it in its core analytics databases or logs.

I use the resulting aggregated information to understand how the website performs and to identify opportunities for technical or usability improvements. It is not used for advertising, visitor profiling or automated decision-making.

Cookies are small text files that a website or service provider may store on your device. Similar browser technologies include localStorage, sessionStorage and other client-side storage mechanisms.

The website does not intentionally use first-party cookies for preferences, personalisation, advertising or behavioural tracking.

The website does not intentionally store visitor information using localStorage or sessionStorage.

Cloudflare Web Analytics does not use cookies or browser storage to measure website usage.

Cloudflare may place strictly necessary cookies when required to:

• Protect the website against malicious activity
• Manage network traffic
• Apply security rules
• Present or complete a security challenge
• Verify that a visitor is human

These may include a Cloudflare clearance cookie, such as cf_clearance, after a visitor successfully completes a security challenge.

These cookies are used exclusively for website security and technical operation. They are not used by this website for advertising, behavioural tracking or marketing.

Because these cookies are strictly necessary for security and delivery of the website, they may be placed without prior consent. Their duration is determined by Cloudflare and the applicable security configuration.
More information is available through the Cloudflare Cookie Policy:

developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies

The website does not currently use non-essential cookies, advertising cookies, personalisation cookies or cookie-based analytics.

A cookie-consent banner is therefore not displayed. Showing an Accept or Reject interface where no consent decision is required would create unnecessary friction and could mislead visitors about the website’s actual data practices.
If non-essential cookies or browser-storage technologies are introduced in the future, this policy will be updated and an appropriate consent mechanism will be implemented before those technologies are activated.

The website’s fonts, including Zalando Sans Expanded and DM Sans, are self-hosted.

The fonts are served directly from the website. Your browser does not need to connect to Google Fonts or another external font provider to display them.

Videos and portfolio media are also self-hosted unless otherwise identified. Loading this media therefore does not intentionally establish a connection with an external video-hosting or social-media platform.
If externally embedded content is added in the future, this policy will be updated before or when that content is introduced.

The website provides direct email links using the mailto: protocol. Selecting an email link opens your device’s default email application or configured email service.

No personal information is transmitted to the website merely by selecting the link. Information is transmitted only when you choose to compose and send an email.

When you contact me, the information you provide may include:

• Your name
• Your email address
• Your organisation or professional role
• The content of your message
• Your email signature
• Any attachments or other information you choose to provide

This information is used to:

• Read and respond to your enquiry
• Continue a professional conversation
• Discuss potential work or collaboration
• Take steps requested before entering a professional agreement
• Maintain relevant records of professional correspondence
• Protect or exercise legal rights where necessary

Depending on the nature of the correspondence, processing is based on responding to your request, taking steps before a potential agreement, complying with a legal obligation, or the legitimate interest of managing professional communications.
Please avoid including sensitive personal information in an email unless it is necessary for your enquiry.

Email sent to hello@andreaschristofi.com is hosted and processed through Namecheap Private Email.

Namecheap may process and store message content, sender and recipient addresses, timestamps, attachments and associated technical information to deliver and secure the email service.

Namecheap acts as an external service provider and handles information in accordance with its own contractual and privacy obligations.

More information is available through the Namecheap Privacy Policy:
namecheap.com/legal/general/privacy-policy

Email correspondence is retained for as long as reasonably necessary to:

• Respond to your enquiry
• Maintain an ongoing professional conversation
• Keep relevant records of work-related discussions
• Manage a potential or existing professional relationship
• Meet applicable legal, accounting or administrative requirements
• Establish, exercise or defend potential legal claims

Correspondence may be deleted when it is no longer required.

You may request the deletion of your correspondence by contacting hello@andreaschristofi.com. A deletion request may be refused or limited where retaining the information is necessary to comply with a legal obligation or protect legitimate legal interests.

Where the processing of personal information is subject to the General Data Protection Regulation, the relevant legal bases may include:

• Legitimate interests
• Limited technical information may be processed to operate, secure, maintain and improve the website, provided those interests are not overridden by your data-protection rights.
• Professional correspondence may also be retained where reasonably necessary to manage communications, maintain relevant records or protect legal interests.

Steps before entering an agreement
If you contact me regarding potential work, collaboration or professional services, your information may be processed to respond to your request and take steps before entering an agreement.

Legal obligations
Information may be retained or disclosed where necessary to comply with an applicable legal, regulatory, accounting or judicial obligation.
Consent
The website does not currently rely on consent for analytics or non-essential cookies. Where consent becomes necessary for a future feature, it will be requested before the relevant processing begins and may be withdrawn at any time.

I do not sell, rent or trade personal information.

Information may be processed by service providers where necessary to operate the website and communications, including:

• Cloudflare, for hosting, content delivery, analytics and security
• Namecheap, for domain registration, DNS-related services and email hosting

Information may also be disclosed where reasonably necessary to:

• Comply with applicable law or a valid legal request
• Respond to a court order or regulatory authority
• Prevent fraud, abuse or malicious activity
• Protect the website, its operator or other people
• Establish, exercise or defend legal claims

Service providers are permitted to process information only in connection with the services they provide and under their respective contractual and legal obligations.

Cloudflare and Namecheap operate internationally. As a result, limited technical information or email correspondence may be processed in countries outside Cyprus or the European Economic Area.

Where applicable, these providers are responsible for implementing appropriate legal and technical safeguards for international transfers in accordance with applicable data-protection law.

Further information about their processing locations and transfer safeguards can be found in their respective privacy policies.

The website may contain links to portfolio projects, client websites, social-media profiles or other third-party websites.

Selecting an external link takes you away from this website. The external provider may collect information, use cookies or apply its own privacy practices after you visit its website.

I do not control and am not responsible for the content, availability, security or privacy practices of external websites. You should review the privacy policy of the relevant third party before providing personal information.

Reasonable technical and organisational measures are used to protect the website and any correspondence received against unauthorised access, loss, misuse or disclosure.

These measures include using reputable infrastructure and email providers, encrypted HTTPS connections, access controls and Cloudflare security services.

However, no website, internet transmission or email system can be guaranteed to be completely secure. You should avoid sending confidential or sensitive information by ordinary email unless appropriate precautions have been taken.

Depending on the circumstances and applicable law, you may have the right to:

• Request access to personal information held about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Request restriction of processing
• Object to processing based on legitimate interests
• Request the transfer of information you provided, where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with a data-protection authority

Some rights are subject to legal conditions and exceptions. For example, information may need to be retained where required by law or where necessary to establish, exercise or defend a legal claim.

To exercise a right or ask a privacy-related question, contact:
hello@andreaschristofi.com

Sufficient information may be requested to verify your identity before responding to a request. Only information reasonably necessary for verification will be requested.

If you believe your personal information has been handled unlawfully, you are encouraged to contact me first so that the issue can be reviewed and, where possible, resolved.

You also have the right to lodge a complaint with the supervisory authority in Cyprus:
Office of the Commissioner for Personal Data Protection https://www.gov.cy/dataprotection/

You may alternatively contact the competent data-protection authority in the country where you live or work, where applicable.

The website does not use personal information for automated decision-making, automated profiling, targeted advertising or decisions that produce legal or similarly significant effects.

The website is a professional portfolio intended for a general audience and is not specifically directed towards children.

The website does not knowingly request or collect personal information from children. If you believe that a child has provided personal information through email correspondence, please contact hello@andreaschristofi.com so that the matter can be reviewed.

This policy may be updated if the website’s functionality, service providers or legal obligations change.

Examples include introducing:

• Contact or NDA-access forms
• Embedded third-party media
• Additional analytics services
• Non-essential cookies
• Personalisation functionality
• Newsletter or subscription features

The revised policy will be published on this page with an updated revision date. Where a change materially affects how personal information is handled, additional notice or consent will be provided where required.

For questions about this Privacy & Cookie Policy, the website’s data practices or your data-protection rights, contact:

• Andreas Christofi
• Nicosia, Cyprus
• Email: hello@andreaschristofi.com
• Website: andreaschristofi.com